Skip to main content

Sending automated threat notifications from client workstations (4.x) - Kennisbank / Endpoint Solutions - ESET Tech Center

Sending automated threat notifications from client workstations (4.x)

Authors list

Issue

  • ESET security products have the ability to send threat warnings or event notification emails from computers/client workstations to a designated email address

Details

  • This feature is especially useful if you are an offsite network administrator and wish to be instantly notified of attempted infiltration

Solution

To configure a computer/client to send threat notifications, please follow the steps below: 

  1. Open ESET Smart Security or ESET NOD32 Antivirus. How do I open my ESET product?
     
  2. Press the F5 key to display the Advanced Setup window. In the Advanced setup tree, click Tools → Alerts and notifications.
     
  3. In the Alerts and notifications options on the right, select the Send event nofications by email check box.

Figure 1-1 

  1. In the SMTP server field, enter the IP address of the mail server. If your SMTP server requires authentication, select the check box and enter the appropriate Username and Password.
     
  2. In the Sender address field, enter the verbiage that is to appear in the 'From' address of threat notification emails. 

    NOTE:

    The Sender address does not have to be an actual user. Additionally, system variables may be used in this field. For example, entering "%Computername% - Virus alert" in the Sender address field will display the workstation's name in the 'From' address of threat notification emails, with 'Virus Alert' appended. This practice can assist the network administrator in immediately pinpointing affected workstations. 

  3. In the Recipient address field, enter the email address where threat notification emails are to be sent. Multiple addresses can be entered, separated by a semicolon. 

    Important!

    Please do not use ESET's email addresses for sending alerts via SMTP.

  4. To send notifications via the Windows messaging service, select the Send event notifications to LAN computers by means of the Messenger service check box and enter the destination computer names, separated by a space.
     
  5. The content of threat notification emails can be changed by clicking the Edit format... button at the bottom of the window.
     
  6. The Message format window will appear (See Figure 1-2 below). Enter text and variables to be included in the body text of threat notification emails. ESET Smart Security and ESET NOD32 Antivirus SMTP Notification recognizes the following internal variables:

    System-defined or user-defined variables can also be used (type SET at a Command Prompt to see what is available).

    Figure 1-2 

     

    NOTE:

    If threat notification messages are not being received, check the IP address of the server from step 4. If the server is outside of your local network, the threat notification messages may be filtered as spam.

     

    • %ComputerName% - NetBIOS name of the computer where the alert occurred
       
    • %Scanner% - Module concerned
       
    • %ErrorDescription% - description of a non-virus event
       
    • %InfectedObject%- name of infected file, message and so forth
       
    • %ProgramName% - the module that generated the alert
       
    • %TimeStamp% - date and time of the event
       
    • %VirusName% - identification of the infection

Add a comment

Please log in or register to submit a comment.

Need a password reminder?